Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/f04617f0-3ec0-332c-8ab5-a5425a19977c.roa
File:                     f04617f0-3ec0-332c-8ab5-a5425a19977c.roa (raw, json)
Hash identifier:          Y5SP1zsOd3Xf7up2H3tRnRR5R4hLXTeQX+qoqCyoIEk=
Subject key identifier:   2B:F0:18:C0:B4:CE:77:0F:2F:55:97:B2:80:00:02:5F:A5:94:95:5D
Certificate issuer:       /CN=0e0d8660-09bf-4666-9cd9-2a53bd12fdfd
Certificate serial:       010D0C9F432858472709C4B423AAF5C7738E9840
Authority key identifier: B5:0A:FA:9B:E7:4D:70:4E:3D:01:B6:25:E3:AA:46:7D:89:1E:99:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/f04617f0-3ec0-332c-8ab5-a5425a19977c.roa
Signing time:             Mon 09 Sep 2024 02:56:09 +0000
ROA not before:           Mon 09 Sep 2024 02:56:09 +0000
ROA not after:            Sun 08 Dec 2024 03:56:09 +0000
asID:                     40124
IP address blocks:        23.184.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:27:09:c4:b4:23:aa:f5:c7:73:8e:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0d8660-09bf-4666-9cd9-2a53bd12fdfd
        Validity
            Not Before: Sep  9 02:56:09 2024 GMT
            Not After : Dec  8 03:56:09 2024 GMT
        Subject: CN=158e9a3e-cc75-4fcf-9ddf-dada8c7e9c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:45:b2:3e:e4:c0:99:fd:28:0c:bb:52:c4:48:
                    76:bd:0b:c9:f1:98:d4:67:fd:a3:0b:0f:10:01:ee:
                    1e:ed:4a:13:68:b9:52:ac:33:44:ae:13:62:25:ae:
                    01:de:68:fe:d7:cf:f4:08:15:38:1a:94:84:e1:31:
                    69:ee:f5:ff:d6:70:e7:13:db:13:32:54:4a:63:93:
                    73:33:45:9e:b7:65:14:e5:4a:bb:22:71:ee:03:e9:
                    c7:17:27:b9:f8:85:fe:d8:24:c4:cb:96:2a:6a:65:
                    d6:c2:2c:4a:9d:68:fe:37:cb:e4:65:6a:49:d6:b9:
                    55:2c:b6:72:f7:7d:45:db:78:87:ad:7f:08:c4:3e:
                    8f:34:96:07:e8:1f:b8:99:01:40:77:c6:b5:53:94:
                    2b:5c:80:b9:7e:41:5c:6c:36:82:61:9c:80:4d:a4:
                    75:3c:b7:fc:82:fe:8b:b9:e4:5c:f9:1b:3b:60:38:
                    85:1c:b8:0e:75:f3:a7:78:3b:de:52:49:50:1d:8b:
                    82:24:32:0b:89:6e:54:38:12:19:f1:dd:95:b4:85:
                    11:2b:f2:26:0e:5c:3e:18:8a:40:f9:4c:aa:62:fb:
                    d3:92:63:99:11:32:81:cb:ae:c6:90:20:d3:27:56:
                    80:dc:a8:0a:a7:41:fb:e9:f9:c6:61:4d:42:8b:03:
                    dc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F0:18:C0:B4:CE:77:0F:2F:55:97:B2:80:00:02:5F:A5:94:95:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/f04617f0-3ec0-332c-8ab5-a5425a19977c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.crl

            X509v3 Authority Key Identifier:
                keyid:B5:0A:FA:9B:E7:4D:70:4E:3D:01:B6:25:E3:AA:46:7D:89:1E:99:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a4:3f:3e:a5:dd:63:61:79:7a:0e:e9:f1:20:93:65:ee:04:
         b8:c0:ee:e6:a8:3d:39:1d:ae:21:e7:9b:c7:48:ea:81:40:d6:
         a6:f5:99:78:ca:51:f2:10:5f:c2:07:64:2b:b0:cf:a8:63:12:
         56:e5:80:fe:14:c2:5a:17:e8:69:b7:21:f9:04:35:35:52:6c:
         28:24:37:b7:74:f3:45:a9:fa:36:43:44:e1:5f:b4:bb:7d:31:
         22:fd:31:8a:00:2c:04:79:94:83:83:18:df:f5:55:9e:0f:51:
         93:df:92:a9:26:74:fc:f9:ec:b8:dc:41:da:94:a4:b1:a2:3d:
         23:a8:5f:6f:0f:0b:2b:e8:83:7d:13:52:0c:8d:75:70:25:4b:
         aa:a9:ab:7e:38:5e:9a:11:dd:ae:61:19:9c:50:85:b8:90:77:
         1f:f7:70:bf:bf:60:36:e9:98:eb:81:10:e3:db:95:4a:d3:66:
         7e:71:f8:4c:fb:7b:75:43:b0:2b:e3:4a:32:92:6a:52:0a:f7:
         e7:2f:9e:87:93:76:b5:c2:b6:c0:3f:78:2f:40:b0:a7:39:dd:
         1c:02:42:f1:6b:e5:83:ea:13:70:f4:b6:11:49:db:70:f4:2d:
         09:50:59:03:dd:52:79:2b:ef:a5:63:4b:f5:5a:47:50:53:f6:
         9d:18:94:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:29 2024 by rpki-client on console-ams.rpki-client.org